server { root {{ doc_root }}; server_name {{ iiab_hostname }}; listen 80; access_log {{ apache_log_dir }}/access.log; error_log {{ apache_log_dir }}/error.log; access_log {{ apache_log_dir }}/scripts.log scripts; index index.php index.html index.htm; rewrite ^/$ $scheme://$server_addr/home/; # let individual services drop location blocks in conf.d include /etc/nginx/conf.d/*; location ~ .*\.php$ { proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header Host $host; fastcgi_pass php; fastcgi_index index.php; fastcgi_split_path_info ^(.+\.php)(/.+)$; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; fastcgi_param SCRIPT_NAME $fastcgi_script_name; include fastcgi_params; } location /cgi-bin { root /usr/lib; } # if you don't like seeing all the errors for missing favicon.ico in root location = /favicon.ico { access_log off; log_not_found off; } # if you don't like seeing errors for a missing robots.txt in root location = /robots.txt { access_log off; log_not_found off; } # this will prevent files like .htaccess .htpassword .secret etc from being served location ~ /\. { deny all; } }